Skip to main content

網域預先驗證：在驗證到期前重新驗證您的網域

關於立刻發行憑證，請保持網域的最新驗證

若要保持無縫發行憑證，在您重新驗證憑證前，不要等待您的網域驗證到期 (完成網域控制驗證 (DCV)。

Don’t wait until your domain's validation expires to revalidate it. With CertCentral, you can revalidate a domain at any time. This domain management feature enables you to complete the domain's validation early, so your immediate certificate issuance process continues without interruption.

Items to note about domain validation:

  • Per industry standards, a domain's validation is valid for 397 days (approximately 13 months).

  • If you order a certificate while the domain's revalidation is pending, we use the domain's current validation to issue the certificate if it is still valid.

提交網域進行重新驗證

  1. 在您的 CertCentral 帳戶的左側主功能表中，前往憑證 > 網域。

    For CertCentral Subscription accounts, in the left menu, go to Validation > Domains.

  2. 在「網域」頁面上，按一下您要重新驗證的網域名稱。

  3. 在網域控制驗證 (DCV) 方法區段中，選取您要用於證明對網域有控制權的方法：

    • 驗證電郵

      Go to your DNS provider and create a TXT record. Add a DigiCert-generated random value to the domain's TXT record. DigiCert does a search for a DNS TXT record associated with the domain that includes the DigiCert-generated random value.

    • DNS TXT 記錄

      An email recipient follows the instructions in a confirmation email sent for the domain. DigiCert sends two sets of DCV emails: Email to DNS TXT contact and Constructed Email.

      • Email to DNS TXT contact

        Place the DNS TXT record on the _validation-contactemail subdomain of the domain you want to validate. The RDATA value of this text record must be a valid email address.

        DigiCert sends an authorization email to the email addresses found in the DNS TXT record on the _validation-contactemail subdomain of the domain you are validating.

      • Email to Constructed Email

        DigiCert sends the authorization email to five constructed email addresses for the domain: admin, administrator, webmaster, hostmaster, and postmaster @[domain_name].

        Before DigiCert can successfully send an authentication DCV email to the domain owner (or domain controller), we must verify that an MX record (a resource record in the Domain Name System [DNS]) exists in the DNS records of the recipient's domain name. The presence of valid MX records enables us to send the authentication email.

      Warning

      End of life for the WHOIS-based Email

      On May 8, 2025, DigiCert ended support for the WHOIS-based domain control validation method (DCV) email method. DigiCert systems have stopped querying WHOIS entirely to find email addresses for domain validations. To learn more about this change, see our knowledge base article, End of life for WHOIS-based DCV methods.

      What should I do?

      Update your domain validation process to use one of the other supported DCV methods. To continue using the Email DCV method, use the DNS TXT record email contacts or the Constructed email method.

    • DNS CNAME 記錄

      Go to your DNS provider and create a CNAME record. In the hostname field, enter _dnsauth. Then, add [random_value].dcv.digicert.com in the target host field to point the CNAME record to dcv.digicert.com. DigiCert does a search for a DNS CNAME record associated with the domain that includes the DigiCert-generated random value.

    • HTTP 現實論證

      You can only use the HTTP Practical Demonstration DCV methods to demonstrate control over fully qualified domain names (FQDNs) exactly as named. To learn more, visit Domain Validation Policy Changes.

      • HTTP Practical Demonstration

        Host a file containing a DigiCert-generated random value at a predetermined location on your website: http://{domain-name}/.well-known/pki-validation/fileauth.txt. DigiCert visits the specified URL to confirm the presence of our random value.

      • HTTP Practical Demonstration with unique filename

        Host a file with a random, DigiCert-generated filename that contains a DigiCert-generated random value at a predetermined location on your website: http://{domain-name}/.well-known/pki-validation/{unique-filename}.txt. DigiCert visits the specified URL to confirm the presence of our random value.

  4. 按一下提交以進行驗證。

下一步是什麼

使用所選取的 DCV 方去完成網域驗證，並證明對您的網域有控制權。如需更多資訊，請參閱網域預先驗證：網域控制驗證 (DCV) 方法。

References:

: